fix: refresh SQL workspace after ODC elevation

[LordofAvernus]

Fixes #893
Related issue: https://github.com/actiontech/dms-ee/issues/893

Summary

• Add ODC SQL Workbench privilege elevation flow for Decathlon.
• Complete DMS approval/status persistence, Provision account switch, dms-ui-ee approval UI, and ODC Client retry/refresh integration.

Compatibility and release notes

• Data migration: A-20260617_odc_privilege_elevation creates the ODC privilege elevation tables, active_dedup_key, and active unique index.
• Migration Down only removes the unique index and intentionally keeps business data for rollback safety.
• Release DMS / Provision / dms-ui-ee / ODC Client in the same batch; runtime validation depends on DMS, Provision, and ODC startup order.
• ODC Client targets dev-4.3.4; refresh or re-enter /odc_query to rebuild datasource/session with the elevated account.

Validation

• dms-ee: focused Go tests passed with go test -vet=off.
• provision: focused Go tests passed with go test -vet=off.
• dms-ui-ee: pnpm run build:provision passed.
• odc-client: pnpm run build:odc passed.